CVE-2023-38872
1 advisory.
Packagist/gugoan/economizzer CVE-2023-38872: low 3.7, EPSS 0.75%
Economizzer Insecure Direct Object Reference vulnerability
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | 0.9-beta1 |
Fixed versions
No fixed version in the source.
Sources
- osv: GHSA-896v-ph5w-379h
- https://nvd.nist.gov/vuln/detail/CVE-2023-38872
- https://github.com/gugoan/economizzer/commit/37308802dfe00d43df396a8afaa2096ece8b7b57
- https://github.com/dub-flow/vulnerability-research/tree/main/CVE-2023-38872
- https://github.com/gugoan/economizzer
- https://www.economizzer.org
CVE-2023-38872 · published · modified · JSON